CVE-2020-1938 vulnerabilities

Vulnerabilities for packages: spark-compat...

CVE-2020-1938

When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that...

CVE-2020-1938

CVE-2020-1938 (Tomcat AJP vulnerability) : The issue affects Apache Tomcat where the AJP Connector, enabled by default in several legacy releases, could be reached through untrusted networks. An attacker could exploit the configured AJP path to read arbitrary files in the web application and pote...

CVE-2020-1938

CVE-2020-1938 is a file read/inclusion vulnerability in the AJP connector in Apache Tomcat. This is enabled by default with a default configuration port of 8009. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instance...

KLA11679 Multiple vulnerabilities in Apache Tomcat

Multiple vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. HTTP request smuggling vulnerability can be exploited remotely to obtain sensitive...

Exploit for CVE-2020-1938

CNVD-2020-10487CVE-2020-1938 Batch Verification Script The b...

Exploit for CVE-2020-1938

CVE-2020-1938TomcatAjpScanner Batch scanning of Tomcat AJP v...

Exploit for CVE-2020-1938

CVE-2020-1938-Tomcat-file-download+file-inclusion Tomcat-Ajp p...

Exploit for CVE-2020-1938

CVE-2020-1938 Tomcat-fileinclude and filered Exploita...

Exploit for CVE-2020-1938

CVE-2020-1938 Suricata 检测规则 suricata CNVD-2020-10487...

Apache Tomcat 9.0.0.M1 < 9.0.31 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 9.0.31. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat9.0.31security-9 advisory. - When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to...

Fixed in Apache Tomcat 7.0.100

High: AJP Request Injection and potential Remote Code Execution CVE-2020-1938 When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If suc...

Fixed in Apache Tomcat 9.0.31

Important: AJP Request Injection and potential Remote Code Execution CVE-2020-1938 When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. I...

Fixed in Apache Tomcat 8.5.51

Important: AJP Request Injection and potential Remote Code Execution CVE-2020-1938 When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. I...

CVE-2014-1938

python-rply before 0.7.4 insecurely creates temporary files...

CVE-2014-1938

python-rply before 0.7.4 insecurely creates temporary files...

UBUNTU-CVE-2014-1938

python-rply before 0.7.4 insecurely creates temporary files...

CVE-2014-1938

python-rply before 0.7.4 insecurely creates temporary files...

CVE-2014-1938

CVE-2014-1938 affects the Python library rply (versions before 0.7.4). The root cause is insecure creation of temporary files, enabling local interference with per-user or system temp directories as described in the related advisories. Remediation: upgrade to a fixed version (0.7.4 or later) or a...

Debian: Security Advisory (DLA-1938-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...